Octopus
Page 2 of 2 — Octopus CVEs from a corpus of 105, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-16801 | Medium | 5.4 | 2017-11-13 | Cross-site scripting (XSS) vulnerability in Octopus Deploy 3.7.0-3.17.13 (fixed in 3.17.14) allows remote authenticated users to inject arbitrary web script or… |
CVE-2017-15611 | Medium | 6.5 | 2017-10-19 | In Octopus before 3.17.7, an authenticated user who was explicitly granted the permission to invite new users (aka UserInvite) can invite users to teams with e… |
CVE-2017-15610 | Medium | 6.5 | 2017-10-19 | An issue was discovered in Octopus before 3.17.7. When the special Guest user account is granted the CertificateExportPrivateKey permission, and Guest Access i… |
CVE-2017-15609 | High | 7.5 | 2017-10-19 | Octopus before 3.17.7 allows attackers to obtain sensitive cleartext information by reading a variable JSON file in certain situations involving Offline Drop T… |
CVE-2017-11348 | Medium | 5.7 | 2017-07-17 | In Octopus Deploy 3.x before 3.15.4, an authenticated user with PackagePush permission to upload packages could upload a maliciously crafted NuGet package, pot… |